Christ-honoring DNS filtering
GraceDNS keeps congregations, households, and individual devices focused on what is pure (Philippians 4:8 NET). Copy one endpoint, paste it anywhere, and enjoy a calm online life.
We never log DNS queries. Use DNS-over-HTTPS or DNS-over-TLS whenever possible so every request reaches us over an encrypted tunnel.
Congregations and ministries can roll out filters with simple, printable endpoints.
Parents set one tier on the router and every phone, TV, and tablet follows.
Believers on the go can point laptops and phones to GraceDNS in under a minute.
Why we serve
GraceDNS exists for pastors, parents, and everyday believers who just want wholesome internet without a rocket science manual. We quiet the noise so disciples can delight in Jesus online and offline.
Printable quick-starts help congregations and ministries deploy safe browsing without IT staff.
Three gentle tiers let parents choose the right balance of compatibility, conviction, and calm.
Simple instructions let any believer point a single phone or laptop to a Christ-honoring resolver.
Small schools and co-ops can match each room to a tier without extra software or licenses.
Plans for every household
Each tier builds on the last. Pick a profile, copy the endpoint, and paste it anywhere your device lets you set DNS.
Gentle baseline fed by broad malware, phishing, and tracker intelligence with a light-touch policy.
Android Private DNS expects DNS-over-TLS format.
Builds on Eden with explicit content, gambling, proxy/VPN bypass points, and piracy domains. SafeSearch enforced.
Most families start here for balanced safety and compatibility.
Everything in Sinai plus the most aggressive baseline and a dedicated sweep against full-spectrum advertising stacks.
May break ad-funded apps. Keep Eden handy as a fallback.
Stacks Zion with an extreme wildcard sweep that silences telemetry brokers, referral loops, and device analytics for locked-down installs.
This tier favors silence over convenience; keep Sinai or Zion handy whenever users need everyday browsing.
Setup in minutes
Copy the secure address that starts with https:// (DNS-over-HTTPS) or the DNS-over-TLS host if you are unsure. We never log DNS lookups, and these encrypted options keep every hop private end-to-end.
Settings → Network & internet → Private DNS → "Private DNS provider hostname" → paste the hostname you copied from the tiers above.
Install a secure DNS profile with the HTTPS address or edit Wi‑Fi DNS and paste the plain-text IPs from your selected profile.
Settings → Network → Hardware properties → DNS server assignment → Manual → paste the HTTPS resolver you copied.
Point DNS to the plain-text IPv4/IPv6 pairs. Reboot devices to lock in protection everywhere.
Glory is intentionally brutal—expect Microsoft 365, Meta, and referral links to break. Always keep Sinai or Zion handy for normal browsing.
Clear convictions
Rooted in Scripture
“Whatever you do, in word or deed, do it all in the name of the Lord Jesus.”
This single call from Colossians 3:17 steers individuals, families, and the whole Church as we filter the web.
Colossians 3:17 (NET)
Support the mission
Generous gifts keep the filters current, fund infrastructure, and let us serve small congregations at no cost. Contributions are not tax-deductible, but they directly support our gospel-shaped goal of a clean internet.
Need clarity?
Eden is a light-touch baseline anchored by malware, phishing, and tracker intelligence; Sinai adds explicit, gambling, bypass, and piracy protections plus SafeSearch; Zion layers on the aggressive ad-network sweep; Glory piles an ultra-aggressive wildcard tier that crushes telemetry/referral brokers and demands careful allowlisting.
Often. Zion already interrupts monetized CDNs, telemetry calls, and certain login helpers—Glory goes even further by silencing referral chains, Meta logins, WhatsApp avatars, Xbox achievements, and many SSO helpers. Microsoft 365's core domains are allowlisted, but plan to drop to Sinai or Eden when a service expects tracking to function.
Start with Sinai so explicit, gambling, bypass, and piracy hosts stay blocked; keep Eden for devices that need near-zero breakage, use Zion for chapels, kiosks, or study spaces that demand ad-free screens, and reserve Glory for locked-down installs with an admin ready to maintain allowlists.
Resolvers must see the domains you ask for, but we immediately drop them—no logs, analytics, or sales. Use the DNS-over-HTTPS or DNS-over-TLS endpoints so only you and GraceDNS can read the requests in transit.
Change the dropdown above, copy the new endpoint, and paste it into your device or router. No reboot required on most phones.
No. GraceDNS is free for homes, ministries, and small schools. Businesses can reach out for a conversation.
Stewardship
Ole Brook Web Services, based in Mississippi, crafts dependable tools for churches and small businesses. GraceDNS is one of our gifts to the wider Body of Christ.
Visit olebrookwebservices.com